I have an IPsec tunnel between my Mikrotik (v 3.17) and a Nortel Contivity.
It works well except for a Nortel IP phone I have.
The traffic that isn’t making it across the firewall is UDP 5000. Strangely…it gets across sometimes, when the phone first boots. Also of interest is a different model Nortel phone works and it uses the same protocol.
I found errors under /ip ipsec stats that increments exactly with the packets that don’t get across the tunnel.
out-bundle-errors: 83998
I’ve checked on the other end of the tunnel and don’t see any errors.
Any thoughts on how to further debug this problem?
Thanks
Scott
An update…
I upgraded to 3.20 to see if there was any improvement.
It seems that the newer code negotiates the encryption differently, so I had to change my MT side encryption algorithm.
Tunnel is back up, but I’m still having problems with one phone.
The out-bundle errors have gone away.
I guess my next step it so remove everything from the lan and watch the IP phone packets coming in and map them to ESP packets going out…see if that’s happening.
Any debug commands that would help with that?
Hi Enk.
I had enabled debug before and didn’t see anything of use.
I see the DHCP request/assignment…NTP stuff…but nothing related to this traffic.
Was bored this morning so upgraded to 3.22 and the out-bundle-errors are incrementing again.